Information We Collect

When you use our financial analysis services, we collect different types of information to provide you with meaningful insights. Here's what we gather and why:

Information You Provide Directly

• Contact details including your name, email address, phone number, and business address when you reach out to us or sign up for our services
• Business information such as company name, industry sector, and financial data you share for analysis purposes
• Payment information when you purchase our services, though we use secure third-party processors and don't store full card details
• Communication records including emails, chat messages, and notes from consultations to provide better service

Information We Collect Automatically

When you visit our website, certain technical information gets collected automatically:

• Browser type, device information, and operating system to ensure our site works properly on your setup
• IP address and general location data (not precise GPS coordinates) to understand our audience and prevent fraud
• Pages visited, time spent on site, and navigation patterns to improve user experience
• Cookies and similar technologies that help us remember your preferences and analyze site usage

Information from Third Parties

Sometimes we receive information about you from other sources, but only when necessary and appropriate:

• Business partners who refer you to our services may share basic contact information with your consent
• Public databases and business registries when conducting due diligence or verifying business information
• Analytics providers who help us understand how people use our website

How We Use Your Information

We're not in the business of collecting data just for the sake of it. Everything we gather serves a specific purpose related to providing you with quality financial analysis services.

Legal Basis for Processing (Thailand Context)

Under Thai Personal Data Protection Act (PDPA), which came into full effect in 2022, we process your data based on several legal grounds:

• Consent: When you explicitly agree to us processing your data for specific purposes, like signing up for newsletters or providing financial documents for analysis
• Contract Performance: When processing is necessary to deliver the services you've contracted us to provide
• Legal Obligation: When we must process data to comply with Thai laws, including tax regulations and business record requirements
• Legitimate Interests: When we have valid business reasons to process data and your rights aren't significantly impacted, such as improving our services or preventing fraud

Before we collect any sensitive personal data (like detailed financial records), we'll always obtain your explicit consent and explain exactly how we'll use it.

Data Sharing and Disclosure

We share your information only when necessary and with parties who are contractually obligated to protect it. Here's the complete picture:

Service Providers

We work with carefully selected partners who help us deliver our services:

• Cloud hosting providers who store our data securely in compliance with international standards
• Payment processors who handle transactions (they follow PCI DSS security standards)
• Email and communication platforms we use to stay in touch with clients
• Analytics services that help us understand website performance without identifying individual users

Legal Requirements

Sometimes we're legally required to share information:

• Thai government authorities when required by law or court order
• Tax authorities as part of normal business compliance
• Law enforcement if we have reason to believe disclosure is necessary to prevent harm or investigate potential crimes

Business Transfers

If Smart Intellect Hub is involved in a merger, acquisition, or sale of assets, your information may be transferred. We'll notify you before this happens and explain your options.

Your Privacy Rights

Under Thai PDPA, you have substantial control over your personal data. These aren't just theoretical rights – we've built processes to make them practical and accessible.

How to Exercise Your Rights

Contact us at [email protected] with your request. We'll respond within 30 days and won't charge you unless your request is clearly unfounded or excessive. You'll need to verify your identity to prevent unauthorized access to your information.

Data Security and Protection

Security isn't an afterthought for us. We've implemented comprehensive measures to protect your information from unauthorized access, disclosure, alteration, or destruction.

Technical Safeguards

• 256-bit SSL encryption for all data transmitted between your browser and our servers
• Encrypted storage for sensitive financial data at rest
• Regular security audits and penetration testing to identify vulnerabilities
• Firewall protection and intrusion detection systems monitoring our networks 24/7
• Secure backup systems with encrypted off-site storage

Organizational Measures

• Access controls ensuring only authorized staff can view your data based on job requirements
• Confidentiality agreements binding all employees and contractors
• Regular privacy and security training for our team
• Clear data handling procedures and incident response protocols
• Annual third-party security assessments

Data Breach Protocol

If a breach occurs that risks your rights and freedoms, we'll notify you within 72 hours as required by Thai PDPA. We'll explain what happened, what data was affected, and what steps we're taking. We'll also notify the Personal Data Protection Committee when legally required.

Data Retention

We don't keep your data longer than necessary. Here's how long we typically retain different types of information:

• Active Client Data: For the duration of our business relationship plus up to 3 years for follow-up support and service improvements
• Financial Records: 7 years as required by Thai tax and accounting regulations
• Communications: Up to 5 years for legal protection and quality assurance purposes
• Marketing Data: Until you unsubscribe or request deletion, whichever comes first
• Website Analytics: Aggregated data retained indefinitely; individual user data for 26 months maximum

After retention periods expire, we securely delete or anonymize your data so it can no longer identify you. If you request deletion and we have no legal obligation to retain the data, we'll delete it promptly.

International Data Transfers

While we're based in Thailand, some of our service providers operate servers in other countries. When we transfer data internationally, we ensure appropriate safeguards are in place:

• We work primarily with providers in countries recognized by Thailand as having adequate data protection standards
• For transfers to other countries, we use standard contractual clauses approved by data protection authorities
• We conduct due diligence on all international service providers to verify their security practices
• Your data may be processed in countries including Singapore, Japan, and the European Union where our cloud infrastructure operates

You have the right to request information about the safeguards we use for international transfers and to obtain copies of relevant documentation.

Cookies and Tracking Technologies

Our website uses cookies – small text files stored on your device – to improve your experience and analyze site usage. Here's what you should know:

Types of Cookies We Use

• Essential Cookies: Necessary for the website to function, like maintaining your session when you log in
• Performance Cookies: Help us understand how visitors use our site so we can improve it
• Functionality Cookies: Remember your preferences and choices to personalize your experience

We don't use advertising cookies or sell data to advertisers. Most browsers allow you to control cookies through settings. Blocking certain cookies may affect site functionality.

Third-Party Analytics

We use analytics services to understand website traffic patterns. These services collect anonymized data and are configured to respect user privacy. You can opt out of analytics tracking through browser extensions or by contacting us.

Children's Privacy

Our services are designed for business professionals and aren't intended for individuals under 18. We don't knowingly collect personal information from minors. If we discover we've inadvertently collected such data, we'll delete it promptly.

If you're a parent or guardian and believe your child has provided us with personal information, please contact us immediately so we can take appropriate action.

Changes to This Policy

We review and update this privacy policy regularly to reflect changes in our practices, technology, legal requirements, and business operations. When we make significant changes, we'll notify you through:

• Email notification to registered users at least 30 days before changes take effect
• Prominent notice on our website homepage
• Updated "Last Updated" date at the top of this policy

Continued use of our services after policy changes indicates acceptance. If you disagree with changes, you can close your account and request data deletion, subject to our legal retention obligations.

Additional Information for Specific Users

Business Clients

If you're engaging our services on behalf of a business, you represent that you have authority to provide employee or customer data for analysis. You're responsible for ensuring you have appropriate consent and legal basis for sharing such data with us.

Newsletter Subscribers

If you subscribe to our newsletter, we'll use your email address solely for sending updates about financial analysis insights and our services. You can unsubscribe anytime using the link in every email. We'll never share subscriber lists with third parties.

Website Visitors

Even if you don't become a client, browsing our website involves some data collection through analytics and cookies. This helps us improve the site experience but you can opt out or limit tracking through browser settings.